Data Privacy and Security

AD25402:

Data Privacy and Security

Course Objectives:

To develop knowledge of data privacy and security principles, apply protection mechanisms and cryptographic techniques, and design secure systems that ensure data confidentiality, integrity, and compliance with regulations.

Data Privacy & Risk Models: CIA triad – Confidentiality, Integrity, Availability. Data privacy vs. Data security – Cyber threats – Malware, Phishing, Denial-of-Service (DoS), Man-In-The-Middle (MITM). Vulnerabilities, Threat modeling, and Privacy Risk Categories.

Activities

Assignment: Map threats to CIA violations using current events.

Quiz: Cyber threats

Cryptographic Techniques for Data Security: Symmetric encryption: AES, DES, Public-key cryptography: RSA, ECC, Hashing: SHA, HMAC, Key exchange: Diffie-Hellman, Digital signatures. Block cipher modes of operation, key management protocols, elliptic curve cryptography with algebraic foundations. Number theory, Fermat’s/Euler’s theorems, Chinese Remainder Theorem algebraic structures, primality testing, and factorization.

Activities

Project Based Experiential Learning:

• Implementation of RSA and SHA for secure message exchange.

• Secure multicast key distribution using Chinese Remainder Theorem

Secure Data Storage: Secure file systems, Disk encryption, Database encryption Secure API access, Cloud data security, Token-based authentication : OAuth, JWT, Application Layer Security, Transport Layer Security, IP Security.

Activities

Review of GATE Questions: SSL/TLS concepts, IPSec

Assignment: Cloud data security

Privacy-Preserving Computation : Homomorphic encryption, Secure Multi-party Computation (SMPC), Federated Learning, Local differential privacy.

Activities:

Project Based Experiential Learning: Federated learning using the Flower framework.

Flipped Class Room: Cryptographic foundations

Legal and Regulatory Frameworks : Data protection laws: GDPR, NIS2; Indian regulations: IT Act, CERT-In, DPDP Act 2023, Aadhaar guidelines; Compliance standards: ENISA, eIDAS, ISO 27001.

Activities

Assignment: Real-world GDPR violation case and its legal impact.

Quiz: Indian Regulations

Emerging Topics in Privacy : Ethics of data privacy; Privacy Impact Assessment (PIA); Privacy in online social media; Case studies in privacy violations and impact; Secure data sharing in federated systems; Advances in privacy technologies.

Activities

Flipped Class Room: Privacy in Online Social Media

Quiz: Privacy Technologies

Weightage:

Continuous Assessment: 40%

 (i) .Activities: 30%

(ii) .Internal Examinations: 70%

EndSemesterTheory Examination: 60% 

Mandated Activities with marks:

Assignments (30), Quiz (10), Project Based Experiential Learning (25), Flipped Classroom (10), Review of GATE Questions (25).

Internal Examinations: TWO tests

References:

1. William Stallings, Cryptography and Network Security: Principles and Practice, Pearson Education, 8th Edition, 2023.

2. Nina Godbole and Sunit Belapure, Cyber Security: Understanding Cyber Crimes, Computer Forensics and Legal Perspectives, Wiley India, 2nd Edition, 2020.

3. Arvind Narayanan et al., A Primer on Differential Privacy, 2017.

4. S. Bose and P.Vijay Kumar, Cryptography and Network Security, Pearson Education, 1st Edition, 2016.